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INTRODUCTION 


During the Executive Advisory Group (EAG) review of Itajor FY 78 ADP 
projects, several management issues were raised. One such issue concerned 
the rapid computer technology advancements that have resulted in increasingly 
decentralized ADP applications in the Agency. This has resulted in increasing 
numbers of personnel performing ADP functions (primarily application design 
and development) outside of the ODP sub-career service. The EAG review 
suggests that this trend will continue. 


An Agency-wide study (EAG ADP Issue #3 - Centralized and Decentralized 
Computer Facilities) has questioned whether, given this trend, we should 
establish common, Agency-wide ADP professional standards for feasibility 
studies, requirements definition, specification standards, and programming 
standards. 


Because of the broad impact. of this issue, the DDCI, in an attachment 
to a 26 July 1978 memorandum entitled Management of Automatic Data Processing 
Resources (APPENDIX A), asked that the Deputy Director for Administration 
formally study the issue and report the findings to him. 


Subsequently, the DDA, in a 28 August 1978 memorandum entitled Establish- 


ment of Agency-Wide ADP Professional Standards (APPENDIX B), asked the 
Director of Data Processing to assume overall responsibility for the study 
and to appoint a chairman. He also asked that each Directorate, the Office 
of the DCI, the Office of Communications, and the Information Systems 
Analysis Staff nominate a member to the study group to represent their 
interests. He suggested that DDS&T nominate two members, one to represent 
NPIC, the second to represent other offices in the DDS&T. A Task Force was 
formed in September wi ODP, appointed Chairman. 
The other members are: 


Ed! 
2a 1A, Rite 


Bob 
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EXECUTIVE SUMMARY JS J te y) PO 


(U) This paper is the third in a series of responses to four 


ADP issues identified by the DDCI in his memorandum to EAG 


members dated 16 December 1976 that should be addressed by 


the EAG. The DDCI's goal in identifying the issues was ta 
"take positive steps during the coming year to improve central 
management of our total ADP program." The first two issues 
were discussed by the EAG on 31 March and 5 April 1977. Agree- 
ment was reached on actions to improve senior management con- 
trol of the month-to-month use of central services and to im- 
prove top management's ability to plan future ADP resource 
requirements. This paper discusses Issue 3 ~ that relating q 
4 ‘ 
to the issue of centralization vs. decentralization of ADP in . 
the Agency. The Issue is stated as follows in the DDCI memo: 
"What balance should we be striving to achieve 
between centralized and decentralized computer 
facilities? I understand that there are many 
complex balances involved, including dedicated 
vS. massive machines, distributed vs. central 
processing, and decentralized vs. centralized 
systems development." 
(U) This paper approaches this issue by studying three aspects 
of the centralization/decentralization issue: facilities, 


professional personnel, and management. It takes stock of 


the current situation and how we got here, examines the factors 


- bearing on the issue, then reaches some conclusions and pro- 


vides recommendations for the EAG. The conclusions and recom- 
mendations of this paper are summarized in the following 


paragraphs. 
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(U) The Agency currently has a mix of centralized/decentral- 


ized ADP facilities which has evolved with little central 
direction or overall plan. Technology has made the mini-~ 


computer an increasingly attractive alternative to the cen- 


_. tral system and there are pressures to enploy more minicomputers 


in the Agency. Many applications can be better satisfied*on 

a minicomputer system, but case-by-case studies are needed to 
make this determination. It is likely that decentralized 
minicomputers will grow in the Agency at a much faster rate 
than in the past. Large central general purpose computer 
facilities will continue to be required for the foreseeable 
future. No specific mix of centralized/iecentralized ADP 
facilities can or should be established by the Agency, but 
better central planning is needed. Agenty policies should not 
inhibit the growth of minicomputers when they offer a better 
alternative to the central system. 

(U) As more computer facilities are dectntralized in the 
Agency, it is important that more attention be given to main- 
taining professional standards for ADP personnel who will 
design and implement both the centralized and decentralized 
facilities and applications. This is essential if we are to 
maintain high quality ADP service in the Agency. A study should 
be conducted on the desirability of an Agency-wide ADP profes- 
ei onat career service. Also, a central source of professional 
ADP advice and assistance should be available to user compo- 


nents that are considering acquiring ADP systems, especially 


2, 
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minicomputers. User components should'also be able to establish 


their own ADP support groups, if they prefer. 


(U) Currently, the Agency does not have any central policy, 


planning, or management relating to the acquisition of dedi- \\ 


.  Cated minicomputer facilities. At the same time, the Agency 


is under increasing external pressure to speak with one vbdice 
on ADP matters to external organizations who are dealing with 
ADP policy, resource, and management issues. It is essential 
that the Agency provide a high level central mechanism for 
policy formulation, planning, and resource control of ADP, 
and for representing the Agency's interests to these external 
organizations. This is particularly important if we move 
toward an increasingly decentralized environment. 

(U) In summary, the recommendations are that: 

a. - Minicomputers should continue to be employed 
by the Agency where they offer a cost/ 
effective alternative to the central system. 

b. Responsibility should be assigned for pro- 
viding Agency-wide technical support to 
offices considering ADP systems, especially 


minicomputers. 


ec. ‘Responsibility should be assigned for pro- 


viding Agency-wide long and short term ADP 
planning. 
d. Responsibility should be assigned for formu- 


lating ADP policy for the Agency and for 
representing the Agency's ADP interests to 
external organizations. 


e. Responsibility should be assigned for con- 
ducting a feasibility study of an Agency- 
wide ADP professional career service. 


f. Resources should be provided to fulfill the 
above responsibilities as assigned. 


3, 
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DDA 78-2966/2 


28 August 1978 


NEMORANDUM FOR: Deputy Director of Central Intelligence! 
anuty Director for National Foreign Assessment? 
Deputy Director for Science and Technology 
Acting Deputy Director for Operations / 
Acting Director of Communications 
Chief, Information Systems Analysis Staff) |. 


bed 


FROMM: John F. Blake 
Deputy Director for Administration 
SUBJECT: ; Establishment of Agency-Wide ADP Professional 
-  $tandards 
REFERENCE: . Memo dtd 26 Jul 73 to EAG Members fr DUCT, subj: 


Managenient of Automatic Data Processing Resources 


1. Reference memorandum, in its attachment, assigns a responsibility, 
amongst others, to the Deputy Director for Administration .to formally study 
the following issue: 


“establish an. . . cottmon, Agancy-wide ADP professional 
standards (feasibility studies, requireients definition, 
specification standards, and programming standards to _ 
nama a few). 


A report on the findings of this study 1 is to ba submitted to DOCI by 
15 December 1978, 

2. Tam asking the Director of Data Processing to assume averal} 
responsibility for this study and he will appoint both a chainagn for ‘the 
study group as well as representation from ODP to be mombars of the group, 
T now ask. that addressees (UUCl for the 0/DCI) nominate to the Director of 
Dota Processing a member to tha study group to reprasent. their intersasts. 
It is suggested that the DUS&T may Wish to nominate to merbers, one 
specifically to rapresent NPIC and the other to HEPES: the balance of. 
that Directorate. 


3. Because of the Somewhat general te ef the §: reece ‘ 
endeavors of the ta problem definition and 


he establishment of fhe scope of the Stu dys 


4 tly Paty 
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4. The same reference noemorandum also requested this Directorate f 


to undertake a study on the matter of creating an Agancy-wide ADP career i 
service. That responsibility has been assigned to the Office of Personnel. } 
I have asked the Directors of-Personnel and Data Processing to assure the 
maintenance of close liaison because of the interrelationships that exist 
between the two study topics. 


- & Addressees ara asked to submit. their nominations directly to " 
Hr. Danny May, Director of Data Processing, by 4 Sep cemele The group, i 
wil} be convened le the call of the chairman. ‘ 
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BEMORANDUM FOR: Executive Advisory Group Merbers 


oe 
FROM z Deputy Director of Central Intelligence . 
SUBJECT . s Management of Automatic Data Processing Resources ; 
‘ E = : . ~ fe 
rr Se YL (ASIUG) The purpose.of this memorandum is to set. forth Agency 1 
i 


. Policy with respeck to conkinuing Executive Advisory Greug (AG) involve= 
ment in the management of Agency Automatic Data Processing {ADP} rescurces: 
in the formulaticn and pricritization of the Agancy's budget, ADP resource 

requirements should be evaluated within the context of component end aie: 
torake responsibilities and should corgete with other avaiiadle component. } 
resources (L.c., pos eh tens contractor supsort, and the like). whe EAG’s | 
review and maenesement of ADP will therefore be concentrated on Agency~-lLeva: 
considerations—ntilization of the central ADP | Facility and the relationsa: 
of ODP costs,to specific user office missions which directly benefit fren | 
these expand ktures, loni-range planning, end issues relating to the guestic 
of centralized/decentrallzed epplication of ApP technology. * 


2. {(A/IUO} The ESG will, in corrjunction with its review cE the 

| Agency's Brogram Plan each year, specifically focus attention onthe 
procosed functional uses of ADP and on proposed major AUP investments. 
Included will be reviews of: on a i 


a. Component ADP activities which in the agqrecate : 
exceed $250 thousand of component-budgeked resources; 


b. New ADP initiatives identifica in pregram plans; “ 


CG. Expansion of ODP computing or service capach tyr 


a. the ieane of the 289 ranking process on requested 
ADP resources. 


3. (A/ICO) The BAG will, during the first quarter of each £Liscal 
year, review the planned currént-year utilization of the central system 
(i.e., ODP) end ak iks discretion, other le 2rge ADP activities. 


a. {he annual review of OOP vill consist of examining 
projects—normally cafined as individual user reguireuertts-—~ 
estirated to consume $250 thousand of Gh? resources in thak 
fiscal year. Users arc O65? will jointly vy present each project 

- in accordance with criteria establisned by the £aG. ‘This 
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review wii result in an EAG- agoroved plan for tha cor 
LS 


sumption of ODP resources for the fiscal vear that 
sensitive both to user needs and to the level of resources 
thek can be committed to the central ADP facility. 

b. Concurrent with (a) ebove, the EAG will revicw, 
with Cd? assistance, Current-year corgenent iurplenentation 
plans for new ADP initiatives ard expanded decentralized 
ADP capacity, the planning for which was revlewed some 15 ye 
months prior (i.e. the program plan). - 
primerily be directed towards changes in requirements and 
avalleble technological alternatives. - : 


-  & Whe combination of (a) and (b) above are intended 
to insure that Agency -ADP resources are being applicd to 
those imcortank problems yeas a high, econcmically accep 


table payorf can be demonstrated or projected. 


A. (n/rco} Any (1) component ADP initiatives or (2) px rojects oo 


by Coe chak were not included in the 


3 that are inibially estimated to cost a total of $250 chouecaa or nine i 
Guring the first three fiscal years, will require ESG eoorcval prier to f 
inifiahion. Likewise, ongoing projects not initially e eeimaced. tO consurc. 
92900 thousand of OP resources (enc, therefore, not revieved In the fall): 
will remuire EAG approval if updated estimates indicate that ODP costs wil 


exceed the review threshold. Yn eech of the above cases, us sex OxLices, If 


coordination with ODP, will subait required data to the Colrptroller, who } 
will axrange For EAG review. User offices will be guices by the instruct} 


containad in annual BOP guidance memorarsda. 


ional 


‘(A/IUO) Each year following the EAG's review of current-year ADP; 
hee an appropriate guidance menorandum will be issued. Attached isi 


| 

[ 
This review will | | | 

| 


such guidance for Fiscal Year 1978. : : 
£ 


6. {(A/ICO) The volicles eshzblished herein are intended to ensure 
thet senioy Agency managetent remains positively involved in ADP matters 
both as a sound manegement oractice and to assure external reviewers that. 
ouc utiliztion of requested ADP resources is necessary, beneficial, and 


Lixmiy under control. 


L£3f ¥rente Ch Carluect 


Frank C. Caclucct 
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Attachment to EAG Memorardum Concerning the Management of Automatic 
Data Processing Resources 


Suoject: FY 1978 Review of Uajor AD? Projects and Issues 


. 41. {A/IUO) The purpose of this guidance is to recard decisions wade 
by the RAG in its review oF major ADP projects Supported by the G&fice of 
Gata Processing (COP) in PY 1978 end to éddress other related ADB management 
issues. oe ‘ 


= —_ oe 


2. (A/TUD) All vrojects reviewed are aporoved ang 

vhem In F¥ 1978 to the extent indicated during the individual project 
‘oviews. CD? will monitor the cests incurred within OOP for each provect 
nd will concurrently notify the user office and the Comptroller when 
‘neurred costs reach 75 bercent OF the approval level. User offices will 

‘2 responsible for validating their project requirements for the remainder 
« £he £iscal year. If increased requirements resolt in GOP coasts projected 
© exceed the approval level by rore than 10 percent, user offices in coor- 
‘pation with OOP will provide bo the Comptroller, within ten working days 
Cre O59 notification, justification for continued fiscal year Oo? support. 
he justification will in@lude; 


OP will susvort 


mwan explanation of the need for increased opp services; 


“~~& new projection of the cost of CDP 
for the remainder of the Fiscal year; and 


e 


Services required 


~~a statement addressing the availability of oop 


resources to provide the increased services and the impact 
on the user organization if the increase is not acproved. 3 


2 Comptroller will arrange for EAG review 


3. (A/IU0) ODP will concurrently intorm the Comptroller and user 
Fices in all instances where ongoing COP-suocorted F¥ 1973 projects, 
% previously reviewsd by the ENG, are estimated to grow to $250 thousand 
ore. The user office, in ccordination with OS?, will wrovicle to the 
‘Totroller, within ten working days of notification, a comletecd Project 
cision Form. ‘The Comptroller will arrange for FAG review of the project, 


of the increased funding request, 


4. (A/IOO) 
' ©more of COP 
ittstion. 
aWPl Projec 


Rew FY 1976 AOP projects estimated to coastrre $250 thousand 

resources through FY 1960 will require EMG asoroval Drier to 

‘he user offica, in coordination with COP, will subnit a com 

t Decision Form to the Cermstroller, who will arrange for EAG 
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a 5. (A/0GO) Dering this ELG review precess, several management issues 

ere raised. Cne such issue concerned? the rapid computer technology edvance- 
ents that have resulted in increasingly decentral tzca ADP applications in 
the @gency. This has resulted in increasing nunsers of pers sonnel performing 
PDP resconsioilities (acplicatica design and Gevelooment orimarily) cuvtside 
of the ODP sub-career service. Every available indication suggests that 


chee) 


this trend will continue. An Agency-wide study has questioned whether, sacs 


given. tais trend, we. should establish. an Ace neyewide. ANP career service, 
anc CORRON Agency-wide ADP crofessional stendards Heed aniaeeae studies, 
requirements definiticn, spoeclkication Standards, and programing standards ° 
to name a few}. Advantedes succested are unlifeomalty, career monility 
throughout the Agency, and comparable advancement opoortunitles for all 
ane profess ionals Beceuse of the broad impzct of this issue, I am asking 
that the Deonuty Director for Paministra tion formally study these issuas 
end susnit a report of his findings to me -by_1s Desenber 19 “978. TY Wena 


Li ke the xepo report t to ine clude a | full ¢ discussion of: 


ge 


. othe pros and cons of each spacific issue; | 
hv 
~~alternative solutions and the manner in which each 
would be implemented and maintained, if approved; 


e~the definition of an “ADP professional" and the 
“\ aporoxiinate number of agency § ersonnel that would, if 
a eppreved, be included in an expanded ADP career service; 


cy ccmcenents with “resident” ee 


ae w~the iroact on Agen 
ongoing AcE progrens; and 


#DP profess ionals and 


) eegonelusions reeched and recommerdations offered. 


6. (A/TUO) Another ‘issue raised oe this review process was the 
need for a formal, long-range Agency ADP ple There iss some sentiment = 
this within the Intelligence Comunity but Se cleie requirements for suc 
a plan have not as vet crystalized. We wlll give more attention to this 
issue as future needs dictate. 


»? 
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EXECUTIVE SUMMARY 


In the DDCI memorandum dated 26 July 1978, subject: Management of 
Automatic Data Processing Resources (APPENDIX A), the DDA was asked to 
study the need for Agency-wide ADP professional standards. Specific areas 
mentioned were "feasibility studies, requirements definition, specification 
standards, and programming standards". As a result, an inter-Agency Task 
Force was formed with representatives from the major providers of ADP 
services in CIA - the Office of Data Processing, Office of Central Refer- 
ence, Office of Communications, Office of Development and Engineering, the 
DDO's Information Management Staff, the National Photographic Interpretation 
Center, and the DDA's Information Systems Analysis Staff. 


The organizations represented on this Task Force are responsible for 
much of the development and maintenance of computer software in CIA. This 
software is defined as the computer programs, together with data files and 
descriptive manuals, that are developed to make computer hardware perform 
useful services. The process of developing this software is called the 
Software Engineering Cycle. The cycle starts when a user requirement is 
identified as a potential computer application and continues through the 
development and maintenance of the software. The product of this cycle is 
referred to as an ADP system. 


During initial Task Force meetings, the members discussed how the 
software development process occurs in their own offices. While each organi- 
zation has its own methodology, it is apparent that there are very strong 
reasons for having one Agency-wide standard for software development. Some 
of these reasons include: 


- Helping to ensure that the proper analysis of the ADP system 
is performed for management review; 

- Facilitating better communications between the various software 
development groups that have joint responsibilities on the same 
systems ; 

- Providing consistent terminology for users who receive support 
from several of the components; 

~ Providing a uniform approach for the development of proposals for 
contractor supplied software; and 

- Providing software engineering training to all software develop- 
ment groups in CIA. This training would be focused toward the 


methodology developed as CIA standards for software development 
evolve. 


The scope of these standards could eventually include all software that 
the Agency uses - generated both internally and externally. The positive 
results that come from one Agency-wide standard could eventually apply to 
all parts of the Software Engineering Cycle. 


The Task Force studied all aspects of the cycle, and chose to focus 
attention on the first phase of this process - the Definition Phase. 
We chose to concentrate our efforts on the Definition Phase because it is 
the most significant phase in the cycle. During this phase, the user and 
computer organizations conduct a series of dialogues which eventually 
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result in a comprehensive and formal definition of the user requirement. 
This requirement definition is used as the basis for subsequent software 
development. 


In looking for a mechanism to continue the work of the Task Force, we 
concluded that an Agency-wide ADP standards committee is the only viable 
solution. The committee approach would ensure that the unique interests of 
the various Agency components involved in software development are recognized 
and coordinated. The exercise of preparing the proposed standard for the 
Definition Phase by this Task Force convinced us that the committee approach 
is sound. The committee should issue these initial standards, periodically 
review and update these standards, and issue new ones for other aspects of 
the Software Engineering Cycle. The managers and computer specialists who 
use the standards should be encouraged to suggest changes. The standards 
will quickly go into disuse without a review mechanism. The recommended 
ADP standards committee would provide the means to enact needed changes. 


In summary, the recommendations of the Task Force are that: 


1. The Director of Data Processing be directed to establish a 
permanent Agency-wide committee to develop, coordinate, and promulgate 
Agency-wide ADP software engineering standards covering the development 
of computer systems. 


2. As the initial step, this committee undertake the development 
and publication of a standard covering the Definition Phase of the 
Software Engineering Cycle. An initial draft of such a standard, 
prepared by the Task Force, is attached as APPENDIX D. 


3. The committee then undertake to prepare a plan to examine the 
feasibility of adopting standards for other phases of the Software 
Engineering Cycle. 
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INTRODUCTION 


During the Executive Advisory Group (EAG) review of major FY 78 ADP 
projects, several management issues were raised. One such issue concerned 
the rapid computer technology advancements that have resulted in increasingly 
decentralized ADP applications in the Agency. This has resulted in increasing 
numbers of personnel performing ADP functions (primarily application design 
and development) outside of the ODP sub-career service. The EAG review 
suggests that this trend will continue. 


An Agency-wide study (EAG ADP Issue #3 - Centralized and Decentralized 
Computer Facilities) has questioned whether, given this trend, we should 
establish common, Agency-wide ADP professional standards for feasibility 
studies, requirements definition, specification standards, and programming 
standards. 


Because of the broad impact of this issue, the DDCI, in an attachment 
to a 26 July 1978 memorandum entitled Management of Automatic Data Processing 
Resources (APPENDIX A), asked that the Deputy Director for Administration 
formally study the issue and report the findings to him. 


Subsequently, the DDA, in a 28 August 1978 memorandum entitled Establish- 
ment of Agency-Wide ADP Professional Standards (APPENDIX B), asked the 
Director of Data Processing to assume overall responsibility for the study 
and to appoint a chairman. He also asked that each Directorate, the Office 
of the DCI, the Office of Communications, and the Information Systems 
Analysis Staff nominate a member to the study group to represent their 
interests. He suggested that DDS&T nominate two members, one to represent 
NPIC, the second to represent other offices in the DDS&T. A Task Force was 
formed in September wit P, appointed Chairman. 

The other members are: 
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BACKGROUND 


Since the introduction of general purpose computers in the late 1950's, 
the CIA has been an active proponent of data processing. The Agency is 
in the business of collecting, analyzing, and producing information, and 
the computer was well suited to assist in all these areas. As the require- 
ments for computer assistance surfaced, computer programmers designed 
systems to satisfy those requirements. 


During this evolutionary process, several Agency components developed 
their own expertise where there was a heavy and continuing need for data 
processing. The most notable examples of this are NPIC, DDO, OCR, OC, 
and OD&E. This continues today and is an attractive arrangement for these 
functional managers. Familiarization with individual systems is a key point 
for efficiently performing maintenance and developing small projects. Since 
these resources are dedicated to the organization, the manager can adjust 
the resources and priorities to suit the needs of the office. The computer 
specialists are familiar with their respective office requirements and the 
chance of a major misunderstanding of user requirements is reduced. 


At the same time that several users were developing their own cadre of 
specialists, ODP was established to provide ADP support to all CIA components. 
This support continues and ranges from highly scientific design and program~ 
ming to business data processing. ODP customers include all the Directorates 
and the Intelligence Community. In addition to this central support, ODP 
currently has 20 officers on rotation in Agency components developing computer 
software. The user office supplies the ceiling position, and ODP in turn 
supplies qualified personnel on a two-year rotational assignment. ODP 
officers are currently assigned in the DDA, DDS&T, NFAC, and the Collection 
Tasking Staff. 


The Task Force members who produced this paper represent the major 
organizations in CIA responsible for software development. Each of the organi- 
zations has developed its own set of documentation standards. While there is 
a difference in the terminology, format, and timing of such documentation, the 
various organizations have long recognized the necessity of documentation. 
APPENDIX F contains a table of the current number of professional staff and 
contractor personnel in each organization. 


Computer software development, also referred to as the Software 
Engineering Cycle, is composed of five phases: Definition, Design, Pro- 
gramming, Testing, and Operation. A description of each phase is contained 
in APPENDIX C. The discussion in the remainder of this study refers to the 
development of standards for these five phases. 
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DISCUSSION 


BENEFITS OF STANDARDIZATION: 


The effective management of software development demands discipline. 
Discipline helps to ensure that computer programs are developed on time, 
within budget, and that they perform as required. The methodologies of 
software engineering have been developed over the last 10 years and continue 
to evolve. The common thread throughout the literature is the plea for 
identifiable phases in the development of a software product, and for control 
over the method that programmers use to implement a system. 


The members of the Task Force are sensitive to these concerns and, as 
managers of large software development components, recognize the value of 
standards. In fact, within their respective components, published software 
development standards have been promulgated. The discussion here does not 
address itself to the use of standards in the development of software, but 
rather to the value of Agency-wide standards. 


The need for Agency-wide software standards is supported by the need 


to encourage a uniform approach to the Software Engineering Cycle. Such 
standards would: 


a. Ensure that the proper analysis and review is performed 
so that appropriate Agency managers can be made aware of the 
scope and magnitude of new ADP systems; 


b. Allow better communications between the various software 
development groups in the CIA; 


c. Provide a consistent set of terminology and procedures to 
users who receive support from several of these groups; 


d. Provide a framework for the developlment of software which is 
easier to maintain; and 


e. Provide a uniform and approved approach for the development 
of the statements of work necessary in acquiring contractor 
supplied software. 


Uniform, Agency-wide software development standards should facilitate 
more effective management review of these activities - before, during, 
and after development. In addition, they would allow better communications 
between software development groups. This would provide the Agency with a 
pool of highly skilled technical people who would be able to interact more 
easily. The benefits of this enhanced communication would be evident when: 


a. Technical experts in one component participate in the 
technical review of another component's project. 


b. Components which have portions of a larger system are 
able to interact with each other more efficiently since both 
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would be developing their respective portions using the 
same standards. 


c. Technical personnel are rotated between ADP components. 


Finally, if all ADP organizations use common criteria for analyzing 
and documenting software definition, very specific training courses 
could be designed to develop our personnel. While CIA sends software 
personnel to various external training courses, these courses are never 
directly related to our methodology. These specific courses would result 
in better designed software through more appropriately trained software 
technicians. 


SCOPE OF PROPOSED STANDARDS: 


The potential scope of these standards includes all the phases of the 
Software Engineering Cycle. These are the Definition, Design, Programming, 
Testing, and Operation phases. A description of each is described in 
APPENDIX C. The Task Force feels that if uniform standards were developed 
for all of these phases, it would help ensure that the software developed 
would be more responsive to user requirements, be developed on time and 
within budget, and require a minimum of effort to maintain during its life 
cycle. 


Currently there are three methods by which software is developed in CIA: 
(l)by the dedicated software development groups represented on the Task Force; 
(2) by Agency individuals who are involved in the development of computer 
software but are not part of one of the groups represented above; and (3) by 
external contractors. For an Agency standards program to be most effective, 
all three methods of software development should conform to these standards. 


FIRST PRIORITY STANDARDS: 


In view of the potential scope of developing Agency-wide data processing 
standards, the Task Force agreed to address the most critical of these phases 
in detail - the Definition Phase. The documentation produced during the 
Definition Phase forms the foundation of the subsequent phases. Without this 
initial effort, the development of the software is not likely to be smooth. 
This phase is of primary concern because manpower and dollar resources are 
allocated at this time. Of equal importance, all Agency components can follow 
the Definition Phase standards regardless of the hardware and software that 
is used. The Task Force has developed an initial draft of the standards for 
the Definition Phase, and included it as APPENDIX D. 


NEED FOR STANDING COMMITTEE: 


Issuing standards is not a one-shot affair. They must be reviewed on a 
continuous basis and updated as needed. The users of the standards must be 
encouraged to review them critically and suggest changes. An Agency-wide 
committee composed of the major application organizations and the four 
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Directorate ADP Control Officers in CIA should be formed to address the 
required standards for all phases of the Software Engineering Cycle. This 
committee would be responsible for: 


- Formally issuing software engineering standards 
- Periodically reviewing these standards 
- Investigating the need for other standards 
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Based on the above discussion, the Task Force concluded that there are 
significant advantages to be gained from adopting Agency-wide ADP software 
engineering standards covering various phases of the Software Engineering 
Cycle. A permanent Agency-wide committee should be formed to develop, 
coordinate, and publish these standards. The committee will ensure that 
the unique interests of the various Agency components involved in software 
development are recognized and coordinated. These standards could eventually 
cover all software written both within CIA and by outside contractors. 
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RECOMMENDATIONS 


The members of the this Task Force whose signatures appear below, 
concur with the following recommendations: 


1. The Director of Data Processing be directed to establish a perma- 
nent Agency-wide committee to develop, coordinate, and promulgate Agency- 
wide ADP software engineering standards covering development of computer 
software. 


2. As the initial step, this committee undertake the development 
and publication of a standard covering the Definition Phase. An initial 
draft of such a standard, prepared by the Task Force, is included as 
Appendix D. 


3. This committee should then prepare a plan to examine the 
feasibility of adopting standards for other phases of the Software 
Engineering Cycle. 
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